We have been attempting to use URL Filtering to block access to web based email using the Palo Alto URL Category web-based-email.
We have found however that there are many web based email services that are not included in this category, including one of Australia's Largest ISP's telstra. The url for this service is email.telstra.com. I though it would be easy enough to log a re-categorisation request. But unfortunately the Palo Alto Categorisation process appear to be broken and not have any common sense.
When attempting to access email.telstra.com you are redirected to a generic logon page for tesltra with a url of sigon.telstra.com and because of this the url email.telstra.com can not be categorised as webmail sevice.
You have a few options here:
custom URL category for these URLs
block FQDN objects in the destination
Add very clear notes to the URL re-categorization request and hope whoever is working it reads them
FWIW: I have always had great luck with re-categorization requests, sometimes you have to explain in the notes that there is something behind the login or there is a redirect etc
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!